Latest posts
Stackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
3 Nov, 19:35edited
Welcome to @stackframe. Unfortunately due to bots I've had to make a gateway channel. To join the new channel please » CLICK HERE « NOTE: If this gateway is down please join @stackframemarket (GATE 2) DM @moschata if there's any issues with the invite linkStackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
20 Oct, 12:04edited
Yahoo ATO (1-click) | t.me/stackframeHello, as of recent I've discovered a Yahoo! ATO flaw which allows full takeover & persistence from just a single click.It requires the VIC to click a link directly or one supplied in an email. Afterwards the VIC will see Yahoo! (the legit and official Yahoo! domain) redirect.Survive and bypass resets and 2FA/MFA updates Freely update password and 2FA/MFA methods No passkey, backup code, etc reliance. Full ATO via just link Everything stays on Yahoo! domain Full inbox and settings accessNOTE: It is entirely 1-click and does not require anything else after this. Everything stays on Yahoo! domain.Demonstrations are available once a deposit has been made with a reputable MM (@Scrizon or @Cupid)$2,750 | @moschataStackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
12 Oct, 02:44edited
Google Hidden Persistence Exploit Kit | t.me/stackframeFull control of a Google account from refresh token/session token/one-time login. Read everything, own everything, no VIC interaction beyond initial access.How to use: paste a refresh token, drop a session cookie jar (stealer / reverse-proxy output, works from any clean IP, no password, no 2FA), OR one background sign-in with email + password + TOTP/backup, etc. You need the VIC exactly once for the above. After the first run, persistence does the rest, no second prompt, everPersistence: One click. Server-side. Lives through password changes, "sign out everywhere", and 2FA resets Invisible by construction: no new device, no session row, no email, no alert Self re-arming: tokens die, the implant mints fresh ones on its own, the VIC's browser does the work for you Pick your implant type from a live list of the VIC's own extensions: names, versions, enabled state, you see what they seeAccess: Password vault decrypted E2E, offline, no re-auth, every saved credential, ready for export Mail: FULL inbox with clean thread rendering, paginated, exportable table Drive, Calendar (ICS export), Contacts, Bookmarks, Autofill, Photos, YouTube subscriptions Devices: Every phone, browser and session row, signed-in state, last-sync, grouped VIC vs planted Account controls: rotate the password, sign out any device with row-level precision, set recovery email, rotate TOTPThe Kit: Every run ends with an audit: confirms the plant landed and nothing unexpected moved Receipts (JSON) for every action, exports for mail, vault, bookmarks, calendar TUI + local web panel (remote-support as well if needed) Logging with copy+paste structure if any client/server-side errors occurNOTE: This does not rely on backup codes, passkeys, etc. This is a completely new technique.$5,000 | @moschataStackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
26 Sept, 17:46
Get ready for a new post soon. Something I've worked on for a while!Stackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
24 Sept, 17:59
@Module | Hardware Wallet Exploit AIO Panel — $x,xxxHello everyone, we're releasing a unified hardware wallet exploit panel covering Trezor, Ledger, SafePal, and OneKey. Single operator dashboard, four independent delivery lanes, fully customizable presentation per target service.Features: — Trezor Suite in-app signer takeover (1-click OR 0-click) — Trezor silent device dossier: zero-prompt bridge enumeration on page load (model, device ID, firmware, label, xpubs + balance tiering in operator panel, no Connect permission popup) — Ledger Wallet in-app signer takeover (1-click) — SafePal browser extension identity spoof lane (1-click) — OneKey WC hardware wallet handoff (1-click) — Live operator panel: session control, release gate, waiting-stage progression, redirect routing, per-victim Trezor dossier view — Per-template identity editor (service name, URL, icon) with verified presets where supported — Customizable pre-confirmation layers (branding, copy, icons) per exploit lane — Source included (readable, non-obfuscated)Requirements: — Public host or tunnel for panel deliveryNOTE(1): Each lane delivers into the native wallet/app confirmation flow. The target must accept a deeplink popup, BUT (for trezor specifically): no deeplink needed when triggering the exploit on the web version of trezor (trezor[.]suite[.]io). Trezor device dossier collection is separate: silent, no popup.NOTE(2): Each exploit is also available as a standalone single-lane panel (Trezor-only, Ledger-only, SafePal-only, OneKey-only). DM for individual pricing.Open to a test before purchase once a deposit is placed with a trusted MM (@scrizon/@cupid).For more information, join @module or PM @lmaowtf17Stackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
14 Sept, 13:52
@Module | Trezor 1-Click Signer Takeover — $4,000 Hello all, we're releasing an in-app trezor-focused EVM signer takeover kit. Single-click delivery into the native desktop wallet flow; once the target confirms, you hold an active signing session on supportedStackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
12 Sept, 00:19
Trezor Signer Spoofer (In-App / Web) | t.me/stackframeFULL signer impersonation kit for Trezor Suite. VIC's wallet displays your identity with a green "Verified Service" badge. They confirm on device because every trust signal checks out.Sign arbitrary messages, transactions with your to/value/data, EIP-712 typed data for permits Account addresses and device model, firmware, PIN state pulled on page visit Panel with per-VIC-session fire buttons and brand switcher: Trezor, MetaMask, Ledger, Uniswap, Pegasus, Custom Delivery via trezor.io, address bar never leaves their domain Fresh pairing per visitor click, no manual URIs Each victim auto-logged: Device Name, VIC #, IP, Agent, Device, Firmware, PIN Addresses Cross-chain: ETH, BTC, SOL, XLM, TRXNOTE: This DOES NOT require system access at all unlike other current Trezor Suite SE kits.Not a signing bypass. Hardware-enforced userStackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
18 Aug, 17:56
@Module & @Stackframe | Ledger Wallet 0day (In-App) — $x,xxxHello everyone, we're releasing a Ledger Wallet 0day that renders a full recovery flow natively inside the application. The target remains within Ledger Wallet for the duration of the session.Features: — In-app execution via Ledger Wallet — Source code included (non-obfuscated) — Custom overlay templates available on requestRequirements: — Public host or tunnel for overlay deliveryNOTE: The target must accept a deeplink popup to open Ledger Live, the recovery flow then runs in-app from there. No further detail will be provided on this point.→ Screenshots attached are for demonstration only, the overlay shown is a sample template, not the only layout available. Custom templates are available upon request.Open to a test before purchase once a deposit is placed with a trusted MM (@scrizon/@cupid).For more information,Stackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
17 Aug, 16:45edited
Funnel | t.me/stackframeLocal desktop sweeper, 4 families. Paste seed(s)/key(s), see balances on 10 chains, funnel to wallet(s) in one pass. no ENS/emails/exchange, seeds + raw keys only, public nodes wired, private RPC optional.Auto-family: one hex key maps to EVM + Tron + BTC + SOL 3 EVM paths, slip-10 SOL, bip84/44 BTC, Tron Batch import: paste or file .txt/.csv/.key/.json Multicall3 EVM + tokens, SPL, BTC utxo, trc20 USDT Gas ferry: gas-poor wallets refueled from donors Multi-output, weighted split, per-chain outputs Dry-run first, txs key-recovered, spike caps, csv export Multi-profile: outputs, history, address book ETH | Polygon | BNB | Arb | Base | OP | Avax | SOL | BTC | TRX — all supported$900 | @moschataStackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
16 Aug, 23:51edited
Stansberry VM | t.me/stackframeVM for Stansberry. Accurately report valid accounts from a list of emails, captchaless, browser-native WAF, no solver or creds needed. Target is never emailed.Works best with rotating residential proxies. However it scales hard on worker count.Definite registered / unregistered verdict per email ~3k (single, no proxies) - 15k–20k+ CPM multi-worker + proxy Session cache, avoid running the same line twice Auto-retry on any errors Existing emails show live in registered panel Live TUI, themes, masked output, peak CPM frozen on completion — s run/stop · p settings · t theme · q quit$1,500 | @moschataStackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
15 Aug, 14:30
Okay bro, which dipshit netdumped on bots to bot this channel & @module G.Stackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
13 Aug, 17:26
This is being sold by @lmaowtf17 & @moschata.Stackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
13 Aug, 17:26
@Module | Trezor 1-Click Signer Takeover — $4,000Hello all, we're releasing an in-app trezor-focused EVM signer takeover kit. Single-click delivery into the native desktop wallet flow; once the target confirms, you hold an active signing session on supported EVM chains.Features: — One-click handoff into the in-app confirmation flow — EVM signer takeover (personal sign, typed data, transactions) — Customizable pre-confirmation layer (branding, copy, service presentation, icons) — Source included (readable, non-obfuscated)Requirements: — Public host or tunnel for delivery — Basic setup on your side (we provide walkthrough after purchase)NOTE: The target must complete the native wallet confirmation prompt, execution stays inside the desktop app from there. No further technical detail will be shared publicly on this listing.→ Screenshot attached is a sample configurations only,Stackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
12 Jul, 19:18edited
Keystone 1-click 0day | Mass-PhishingPremade & fully customisable. Update the message keyst.one customers see and be able to delete it from their tables completely. Message text, url, time etc are all controlled by you. You could point users to "keystone.support" if you wanted to, for example.$x,xxx - $xx,xxx+ (offer, quicksale) | @moschataPATCHED - I'll try and see if there's another method.NOTE: ONLY SELLING TO ONE SINGLE PERSON. DO NOT TRUST ANYONE WHO SAYS THEY HAVE THE SOURCE. NOBODY HAS BOUGHT AT ALL AS OF YET.1,110Open in TelegramStackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
8 Jul, 11:58edited
OneKey VM | t.me/stackframeVM for OneKey. Accurately report valid OneKey accounts (cloud backup, keyless, prime subscription, etc) from a list of emails.This VM sort of requires rotating proxies. No captcha solver or credentials needed.Definite registered / unregistered verdict per email, written to a results file. ~6,000-25,000+ CPM, scales with worker count (64-256+ workers for example). Caching, avoid running the same line twice. Live TUI.$1,300 | @moschataStackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
28 Jun, 10:24
UPDATE: Sorry I've been away for a week on a small vacation. Back up and running now if anyone has any inquiries or requests.Stackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
17 Jun, 16:24
Phone Number version for Binance US (included).Stackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
17 Jun, 16:23
Binance US VM | t.me/stackframeVM for Binance US. Feed an email OR phone number list; precisely identifies real VS fake accounts at volume, no inbox/SMS access and nothing ever sent to the targets themselves.Every entry resolves to a definite registered / unregistered verdict, written straight to a clean results file. Registered hits also surface the account's internal ID. Already-checked entries are skipped with caching, so any run can be stopped and resumed with zero duplicate work.Throughput reaches high of ~55,000-60,000 CPM on a single account, accurate, no proxies, no captcha solvers, no passwords needed. Add accounts to sustain it at scale (easy cookie grabbing to add multiple per browser profile).Definite registered / unregistered verdict per email or phone, plus the internal account ID on every hit. Email and phone modes from one tool, written to a clean, readableStackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
13 Jun, 17:39edited
Bitstamp VM | t.me/stackframeVM for Bitstamp. Feed email address list; precisely identifies real VS fake accounts at volume, no inbox access and nothing ever sent to the addresses themselves.Every address resolves to a definite registered / unregistered verdict, written straight to a clean results file (results.txt by default). Already-checked addresses are skipped automatically with caching, so any run can be stopped and resumed with zero duplicate work or wasted spend.Throughput scales with your setup, roughly 200 to 2,000+ verifications per minute, sustained, depending on hCaptcha solver quality and proxy pool (CaptchaSonic was used in demonstration). CapSolver will not work as it doesn't support hCaptcha anymore.Definite registered / unregistered verdict per address, written to a clean, readable results file. Parallel solver pool, run multiple captcha services and keys atStackframe MARKET | web3/crypto (dApp, DeFI, DAO, etc)
7 Jun, 19:32edited
Google Voice Autodialer | t.me/stackframe 😀Processes Google Voice (or SIP trunk) calls sequentially, one at a time. Categorises each call within 1.5 seconds as ringback, pickup, human, voicemail, or silent, acting on each instance with maximum efficiency.Upon human response, the selected prompt is activated (e.g., Ledger, Trezor, Coinbase, Kraken, etc.). Upon voicemail detection, the call is terminated (configurable). The microphone remains silent by default; no audio is transmitted unless explicitly scripted. As per the standard process.Ringback and voicemail beep detection utilizing Goertzel algorithm plus streaming whisper transcripts. Press-1 detection via dual-band Goertzel algorithm with a minimum 40 ms tone duration. Per-call WAV recording with webhook notification upon outcome. Live transcripts available in the web console. Interfaces
A feedback bot for your channel — free
Followers write to the bot, you answer by reply, your account stays hidden. Created in one tap.
How it works →Related Channels
Other channels in the same section of the catalogue.
